Home > Vulnerability Database > CVE-2024-21886

Mend.io Vulnerability Database

CVE-2024-21886

Date: February 28, 2024

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

Language: C

Severity Score

7.8

Related Resources (26)

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZ2IJJDHJETNE76VUX4G7UI5EG5HYFEH/

Url: https://access.redhat.com/errata/RHSA-2024:0558

Url: https://access.redhat.com/errata/RHSA-2024:0614

Url: https://access.redhat.com/errata/RHSA-2024:0617

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EJBMCWQ54R6ZL3MYU2D2JBW6JMZL7BQW/

Url: https://access.redhat.com/security/cve/CVE-2024-21886

Url: https://access.redhat.com/errata/RHSA-2024:2995

Url: https://access.redhat.com/errata/RHSA-2024:0597

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZ75X54CN4IFYMIV7OK3JVZ57FHQIGIC/

Url: https://access.redhat.com/errata/RHSA-2025:12751

Url: https://access.redhat.com/errata/RHSA-2024:2996

Url: https://access.redhat.com/errata/RHSA-2024:0557

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2256542

Url: https://access.redhat.com/errata/RHSA-2024:2170

Url: https://lists.debian.org/debian-lts-announce/2024/01/msg00016.html

Url: https://gitlab.freedesktop.org/xorg/xserver/-/commit/bc1fdbe46559dd947674375946bbef54dd0ce36b

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J4H7CH565ALSZZYKOJFYDA5KFLG6NUK/

Url: https://access.redhat.com/errata/RHSA-2024:0626

Url: https://access.redhat.com/errata/RHSA-2024:0607

Url: https://access.redhat.com/errata/RHSA-2024:0629

Url: https://access.redhat.com/errata/RHSA-2024:0320

Url: https://access.redhat.com/errata/RHSA-2024:2169

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-21886

Url: https://access.redhat.com/errata/RHSA-2024:0621

Url: https://security-tracker.debian.org/tracker/CVE-2024-21886

Url: https://www.mend.io/vulnerability-database/CVE-2024-21886

Severity Score

7.8

Weakness Type (CWE)

Heap-based Buffer Overflow

CWE-122

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2024-21886

Date: February 28, 2024

Language: C

Severity Score

Related Resources (26)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?